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Recently Boyer and Mor [arXiv:1 010.2221 (2010) pointed out the first conclusion of Lemma 1 
in our original paper Phys. Rev. A 79, 052312 (2009) is not correct, and therefore, the proof of 
Theorem 5 based on Lemma 1 is wrong. Furthermore, they gave a direct proof for Theorem 5 and 
affirmed the conclusions in our original paper. In this reply, we admit the first conclusion of Lemma 
1 is not correct, but we need to point out the second conclusion of Lemma 1 is correct. Accordingly, 
all the proofs for Lemma 2, Lemma 3, and Theorems 3-6 are only based on the the second conclusion 
of Lemma 1 and therefore are correct. 

PACS numbers: 03.67.Dd, 03.67.Hk 


The idea of semiquantum key distribution (SQKD) in 
which one of the parties (Bob) uses only classical op- 
erations was recently introduced [l|. Also, an SQKD 
protocol (BKM2007) using all four BB84 Q states was 
suggested [l|. Based on this, we presented some SQKD 
protocols which Alice sends less than four quantum states 
and proves them all being completely robust [3] . In par- 
ticular, we proposed two SQKD protocols in which Alice 
sends onlyone quantum state |+). Very recently, Boyer 
and Mor [4J pointed out the first conclusion of Lemma 1 
in our original paper jsj is not correct, and therefore, the 
proof of Theorem 5 based on Lemma 1 is wrong. Fur- 
thermore, they gave a direct proof for Theorem 5 and 
affirmed the conclusions in Ref. Q. 

In this reply, we first thank professors Boyer and Mor 
[3] for their attention to our work and admit the first 
conclusion of Lemma 1 in Ref. Q is not correct. Partic- 
ularly, we want to thank them for they not only pointed 
out the error in our paper but also gave a proof for The- 
orem 5 and confirmed the result of Theorem 5 in our 
original paper. 

In this reply, we would also like to point out the second 
conclusion of Lemma 1 is correct. Accordingly, all the 
proofs for Lemma 2, Lemma 3, and Theorems 3-6 are 
only based on the the second conclusion of Lemma 1 and 
therefore are correct. To delete the first conclusion of 
Lemma 1 in Ref. Q, we only need to define the final 
combining state p lAB of Alice's ith particle and Bob's 
ith particle and modify Lemma 1 as follows. 

Lemma 1. Let p' AB denote Alice and Bob's final 
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combining state and let p' A be the final combining state 
of Alice's ith particle and Bob's ith particle. If the attack 
(Ue, Uf) induces no error on CTRL and TEST bits, then 
p' AB satisfies the following conditions: 

(1) If h = 0, then p' AB = (I&X&Da ® (|0><0|)s, i.e., 
Alice's ith final state is the sent state \4>i); 

(2) If bi = 1, then p lAB = (x\QQ) + y\ll))(x(00\ + 
y(ll|) when the sent state \<f>i) = x\0) + y\l), i.e., the 
final combining state of Alice's ith particle and Bob's ith 
particle is the pure state x\00) + 

Proof. (1) The case of b, = 0. 

The ith bit is a CTRL bit. Alice's final quantum state 
p' A 7^ \tfii){<j)i\ can be detected by Alice as an error with 
some non-zero probability. Also, Bob's ith final state is 
|0) since it is not acted any operation. Thereby p' AB — 
(|&>(&|)a®(|0}<0|) b . 

(2) The case of b, = 1. 

The probability of the ith bit being a TEST bit is 
about |. Also, if = a;|0) + y|l), p' AB ^ (x\00) + 
y|ll))(if(00|-r-y(ll|) can be detected by Alice and Bob as 
an error with some non-zero probability when the ith bit 
is a TEST bit. Therefore p' AB = (x|00) + y|ll))(x(00| + 

m\)- ■ 

The proof of Lemma 2 in Ref. |3j is only based on 
the second conclusion of Lemma 1 in Ref. [3(. That is, 
Lemma 2 in Ref. [3] also holds when Lemma 1 is reformed 
as the above form. Because the proofs of Lemma 3 and 
Theorems 3-6 are only based on Lemma 2 in Ref. [3j, 
these results still hold. 
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